1-66. (Cancelled) 



Listing of Claims 



67. (Previously presented) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

adding a silent guard variable to the software program; 
selecting a computation in the software program; 

determining an expected value of the silent guard variable at the execution point of 
the selected computation; 

setting the runtime value of the silent guard variable to the expected value of the 
silent guard variable in the software program at a silent guard insertion point, the silent guard 
insertion point being separated fi-om the execution point of the selected computation by a 
plurality of program instructions of the software program; and 

revising the selected computation to be dependent on the runtime value of the silent 
guard variable, such that the software program executes improperly if the runtime value of 
the silent guard variable is not equal to the expected value of the silent guard variable. 

68. (Previously presented) The method of claim 67, ftirther comprising: 

selecting a program variable in the software program; 

determining an expected value of the selected program variable at a dependency point 
in the software program; and 

making the runtime value of the silent guard variable dependent on the runtime value 
of the selected program variable at the dependency point. 
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69. (Previously presented) The method of claim 68, wherein the step of making the value of 
the silent guard variable dependent on the runtime value of the selected program variable 
comprises: 

computing the runtime value of the silent guard variable using a mathematical 
expression including the runtime value of the selected program variable and the expected 
value of the selected program variable at the dependency point. 

70. (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

selecting a constant value used in the selected computation; and 
replacing the constant value with a mathematical expression that is dependent on the 
runtime value of the silent guard variable, such that the mathematical expression evaluates to 
the constant value if the runtime value of the silent guard variable is equal to the expected 
value of the silent guard variable. 

71 . (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

selecting a computation variable used in the selected computation; 

determining an expected value of the computation variable at the execution point of 
the selected computation; and 

replacing the computation variable with a mathematical expression that is dependent 
on the runtime value of the silent guard variable, such that the mathematical expression 
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evaluates to the expected value of the computation variable if the runtime value of the silent 
guard variable is equal to the expected value of the silent guard variable. 

72. (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

inserting a mathematical expression including the runtime value of the silent guard 
variable and the expected value of the silent guard variable into the selected computation. 

73-77. (Canceled) 

78. (Previously presented) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

selecting a program variable in the software program; 

selecting a computation in the software program; 

determining an expected value of the program variable at the point of execution of the 
selected computation; and 

revising the selected computation to be dependent on the runtime value of the 
program variable, such that the software program executes incorrectly if the runtime value of 
the program variable is not equal to the expected value of the program variable. 



79. (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

selecting a constant value used in the selected computation; and 



replacing the constant value with a mathematical expression that is dependent on the 
amtime value of the program variable, such that the mathematical expression evaluates to the 
constant value if the runtime value of the program variable is equal to the expected value of 
the program variable. 

80. (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

selecting a computation variable used in the selected computation; 

determining an expected value of the computation variable at the point of execution 
of the selected computation; and 

replacing the computation variable with a mathematical expression that is dependent 
on the runtime value of the program variable, such that the mathematical expression 
evaluates to the expected value of the computation variable if the runtime value of the 
program variable is equal to the expected value of the program variable. 

81. (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

inserting a mathematical expression including the runtime value of the program 
variable and the expected value of the program variable into the selected computation. 

82. (Currently amended) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

selecting a program block containing a stop that computes a resuh necessary for 
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proper execution of the software program, the program block comprising at least one 
program instruction; 

selecting a silent guard for the program block; 

determining the expected value of the silent guard at the start of execution of the 
program block; and 

installing a branch inotruction first computation dependent on the silent guard in the 
software program, such that if the runtime value of the silent guard is not equal to the 
expected value of the silent guard then the branch inotruction first computation causes the 
result computed by the program block to b e skipp e d evaluate imp roperly, causing the 
software program to execute improperly. 

83. (Currently amended) The method of claim 82, wherein the step of selecting a silent 
guard comprises: 

adding a silent guard variable to the software program; 
using the silent guard variable as the silent guard; and 

installing an initialization instruction for the silent guard variable that executes prior 
to the branch instruction first computation in the software program, the initialization 
instruction setting the silent guard variable equal to the expected value of the silent guard. 

84. (Previously presented) The method of claim 82, wherein the step of selecting a silent 
guard comprises: 

selecting a program variable in the software program; and 
using the program value as the silent guard. 
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85. (Previously presented) The method of claim 82, wherein the step of selecting a silent 
guard comprises: 

selecting an insertion point in the software program; 
selecting a program variable in the software program; 

determining the expected value of the program variable at the insertion point; 

making the runtime value of the silent guard dependent on the runtime value of the 
program variable, such that the runtime value of the silent guard equals the expected value of 
the silent guard if the runtime value of the program variable equals the expected value of the 
program variable at the insertion point. 

86. (Currently amended) The method of claim 85, wherein the step of making the runtime value 
of the silent guard dependent on the runtime value of the program variable, comprises: 

installing a mathomatic -al second computation that includes the runtime value of the 
program variable, such that the result of the mathefflatieal second computation is corrupted if 
the runtime value of the program variable is not equal to the expected value of the program 
variable at the insertion point; and 

setting the silent guard equal to the resuh of the maSiefflatieal second computation. 

87. (Previously presented) The method of claim 86, wherein the silent guard computation uses 
both the expected value of the program variable and the runtime value of the program variable. 
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88. (Previously presented) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 

a program computation at an execution point in the software program; 

a silent guard variable having an expected value at the execution point; 

a program variable having an expected value at a dependency point in the 
software program, the dependency point being separated fi-om the execution point by a 
plurality of program instructions, the runtime value of the silent guard variable being 
dependent on the runtime value of the program variable at the dependency point, such 
that the runtime value of the silent guard variable will not equal the expected value of the 
silent guard variable at the execution point if the runtime value of the program variable is 
not equal to the expected value of the program variable at the dependency point; and 
wherein the program computation is dependent on the runtime value of the silent guard 
variable, such that the program computation will evaluate improperly and the software 
program will execute improperly if the runtime value of the silent guard variable is not equal 
to the expected value of the silent guard variable. 

89. (Canceled) 

90. (Previously presented) The recordable computer media of claim 88, wherein the runtime 
value of the silent guard variable is also dependent on the expected value of the program variable at 
the dependency point. 
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91. (Previously presented) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 

a program variable having an expected value at a first dependency point in the 
software program; 

a silent guard variable having an expected value at the first dependency point; 

a mathematical computation that includes the runtime value of the silent guard 
variable and an expected term, the expected term being set based on the expected value of 
the silent guard variable at the first dependency point; 

wherein the runtime value of the program variable is dependent on the result of the 
mathematical computation which is dependent on the runtime value of the silent guard 
variable, such that the runtime value of the program variable will not equal the expected 
value of the program variable at the first dependency point if the runtime value of the silent 
guard variable does not equal the expected value of the silent guard variable at the first 
dependency point, which will cause the software program to execute improperly. 

92. (Previously presented) The recordable computer media of claim 9 1 , the tamper resistant 
software program fiirther comprising an instruction setting the value of the program variable at 
the first dependency point equal to a function of the runtime value of the program variable and 
the result of the mathematical computation. 

93. (Cancelled) 
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94. (Currently amended) The A.recordable computer media of claim 91 having a tamper 
resistant software program recorded thereon, t he tamper resistant sofl^vare program further 
comprising^! 

a program variable having an expected value at a first dependency point in the 
software program and an expected value at a second dependency point in the software 
program, the expected value at the first dependency point not being equal to the expected 
value at the second dependency point: 

a silent guard variable having an expected value at the first dependency point: 

a mathematical computation that includes the runtime value of the silent guard 
variable and an expected term, the expected term being set based on the expected value of 
the silent guard variable at the first dependency point: 

a supplementary silent guard variable having an expected value at a ^the second 
dependency point in the software program; 

wherein the runtime value of the program variable is dependent on the result of the 
mathematical computation which is dependent on the runtime value of the silent guard 
variable, such that the nmtime value of the program variable will not equal the expected 
value of the program variable at the first dependency point if the runtime value of the silent 
guard variable does not equal the expected value of the silent guard variable at the first 
dependency point, which will cause the software program to execute improperly: and 

wherein the e xp ecte d v afafr^#4he-pregram-^yaFt able at the seco nd-dep en d e ney 
point is not e qual to the expected val ue-ef 4he program v ar iable at th e first d ependency 
point; and the runtime value of the program variable at the second dependency point is 
dependent on the runtime value of the supplementary silent guard variable, such that the 
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runtime value of the program variable will not equal the expected value of the program 
variable at the second dependency point if the runtime value of the supplementary silent 
guard variable does not equal the expected value of the supplementary silent guard 
variable at the second dependency point, which will cause the software program to 
execute improperly. 



95. (Currently amended) The A.recordable computer media of claim 91, having a tamper 
resistant software program recorded thereo n , the tamper resistant software program comp risinpr 
a_:Brogr am variable having an expected value at a first dependencv point in the 
software program and a n expected value at a second dependencv point in the software 
program, the exp ected value at the first dependency point not being equal to the expected 
value at the second dependencv point: 

a sile nt guard variable having an expected value at the first dependencv point and an 
expected value at the second dependencv point in the software program: 

a mathem atical computation that includes the runtime value of the silent g uard 
variable and an ex pected term, the expected term being set based on the expected value of 
the silent guard variable at the first dependencv point: 

wher ein the runtime value of the program variable is dependent on the result of the 
mathematical computation which is dependent on the runtime value of the silent g uard 
variable, such that the runtime value of the program variable will not equal the exp ected 
value of the progr am variable at the first dependencv point if the runtime value of the silent 
guard variable does not equa l the expected value of the silent guard variable at the first 
dependencv point, which will c ause the software program to execute improperly: and 
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wherein tho o ?cpoctcd value of the program variable at a o o cond d o pondci ^tey-peHrt 
is not equal to the expected \^aluo of the program variable at the firot dopondoncy point; 
and tho oilont guard variable haa a second expected \-alue at the second dep e ndency point; 
and the runtime value of the program variable at the second dependency point is 
dependent on the runtime value of the silent guard variable at the second dependency 
point, such that the runtime value of the program variable will not equal the expected 
value of the program variable at the second dependency point if the runtime value of the 
silent guard variable does not equal the expected value of the silent guard variable at the 
second dependency point, which will cause the software program to execute improperly. 

96-100. (Cancelled) 

101. (Previously presented) The method of claim 78, wherein the program variable is used in more 
than one instruction of the software program, and the last instruction to use the program variable 
before the point of execution of the selected computation during execution of the software program 
is separated from the point of execution of the selected computation by a plurality of program 
instructions not using the program variable. 

102. (Previously presented) The method of claim 83, wherein the installation point of the 
initialization instruction for the silent guard variable is separated from the installation point of the 
branch instruction by a plurality of program instructions of the software program. 

1 03 . (Previously presented) The method of claim 85, wherein the insertion point is separated from 
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the installation point of the branch instruction by a plurality of program instructions of the software 
program. 

104. (Previously presented) The recordable computer media of claim 94, wherein the first 
dependency point is separated from the second dependency point by a plurality of program 
instructions of the software program. 

105. (Previously presented) The recordable computer media of claim 95, wherein the first 
dependency point is separated from the second dependency point by a plurality of program 
instructions of the software program. 

106. (Previously presented) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 

a silent guard variable having an expected value at a first dependency point in the 
software program; 

a program variable having an expected value at a second dependency point in the 
software program; 

a mathematical computation that includes the runtime value of the silent guard 
variable and an expected term, the expected term being set based on the expected value of 
the silent guard variable at the first dependency point; 

wherein the runtime value of the program variable at the second dependency point is 
dependent on the result of the mathematical computation which is dependent on the runtime 
value of the silent guard variable at the first dependency point, such that the runtime value of 
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the program variable at the second dependency point will not equal the expected value of the 
program variable at the second dependency point if the runtime value of the silent guard 
variable at the first dependency point does not equal the expected value of the silent guard 
variable at the first dependency point, which will cause the software program to execute 
improperly. 

107. (Previously presented) The recordable computer media of claim 106, wherein the first 
dependency point is separated from the second dependency point by a plurality of program 
instructions. 

108. (Previously presented) The recordable computer media of claim 106, the tamper resistant 
software program fiirther comprising an instruction setting the value of the program variable at 
the second dependency point equal to a function of the runtime value of the program variable and 
the result of the mathematical computation. 

109-110. (Cancelled) 

111. (Currently amended) The recordable computer media of claim-44 0 112 . wherein the 
insertion point is separated from the branch instruction by a plurality of program instructions. 

112. (Currently amended) Tbe^^eeefdable-eefflputeFiHedia-efc laim 1 1 0, A recordable computer 
media having a tamper resistant software program recorded thereon, the tamper resistant software 
program comprising: 
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a program block for causing improper execution of the software program, the 
program block including at least one program instruction: 

a silent guard in the software program having an expected value at the start of 
execution of the program block; 

a program variable having an expected value at an insertion point, wherein the 
runtime value of the silent guard is made dependent on the runtime value of the program 
variable using a mathematical computation that includes the runtime value of the program 
variable, wherein t he result of the mathematical computation is -being corrupted if the 
runtime value of the program variable is not equal to the expected value of the program 
variable at the insertion point , such that the runtime value of the silent guard equals the 
expected value of the silent guard if the runtime value of the program variable equals the 
expected value of the program variable at the insertion point: 

a branch instruction in the software program dependent on the runtime value of the 
silent guard, w herein the branch instruction will cause the program block to be executed if 
the runtime value of the silent guard is not equal to the expected value of the silent guard- 
causing the program to execute improperly. 

113. (Previously presented) The recordable computer media of claim 112, wherein the 
mathematical computation includes an expected term, the expected term being set based on the 
expected value of the program variable at the insertion point. 

1 14. (Currently amended) A method for adding tamper resistance to a software program, the 
method comprising: 
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adding determining^a program block in tlie software program having a p rogram 
variable with an expected value that causes improper execution of the software program 
when the program variable is not equal to the expected value of the program variable , the 
program block including at least one program instruction; 

inserting a teanelwHstftietiefi silent guard having an expected value at the start of 
execution of the program block; 

making the branch instruction program variable dependent on a^the silent guard using 
a mathematical function having an oxpactod vnlno nnH n nmtimn T-nii,n such that the branch 
*ftstruetiet^^ause&4he^H-egm^ mathematical fimction does not compute 

the expected value of the program value if the silent guard is not equal to the expected value 
of the silent guard, which causes the software program to execute improperly. 

115. Cancelled 

1 1 6. (Currently amended) The method of claim-14^ 117. wherein the insertion point is separated 
from the branch instruction by a plurality of program instructions. 

117. (Currently amended) Th e m e thod of claim - 415, wher ein A method for adding tamper 
resistance to a software program, the method comprising: 

adding a program block that causes improper execution of the software program, the 
program block including at least one program instruction: 

inserting a branch instruction at the start of execution of the program block: 
identifi^ing a program variable in the software program having an expected value 
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at an insertion point: 

making the branch instnjction dependent on a silent guard having an expected value 
and a runtime value: 

making the runtime value of the silent guard i; ; mad e dependent on the runtime 
value of the program variable using a mathematical computation that includes the runtime 
value of the program variable, wherein the resuh of the mathematical computation is 
corrupted if the runtime value of the program variable is not equal to the expected value 
of the program variable at the insertion poin t, such that the runtime value of the silent 
guard equals the expected value of the silent guard if the runtime value of the program 
variable equals the expected value of the program variable at the insertion point, and the 
branch instruction causes the program block to be executed if the runtime value of the 
silent guard is not equal to the expected value of the silent guard . 

118. (Previously presented) The method of claim 1 17, wherein the mathematical computation 
includes an expected term, the expected term being set based on the expected value of the program 
variable at the insertion point. 

119. (New) The method of claim 114, wherein the mathematical computation includes the 
runtime value of the silent guard and the expected value of the silent guard. 



17 



